×
Apple

France Eyeing Antitrust Action Against Apple (axios.com) 25

The French Competition Authority is likely to move forward soon with an antitrust investigation into Apple over complaints tied to 2021 changes to its app tracking policies, Axios reported, citing sources. From the report: A formal investigation would mark the first major government move taken globally against Apple related to privacy rule changes that upended the digital advertising world. French regulators are favoring issuing a formal "Statement of Objections" to parties involved in the matter in coming weeks, sources told Axios.

That step would signal to groups that issued initial complaints about Apple's actions and Apple that the authority found evidence of illegal anticompetitive behavior in its initial review of the complaints it received. The 2020 complaint argues that Apple's app tracking changes did not adequately adhere to European Union privacy rules and that Apple failed to hold itself to the same ad targeting standards that it forced on its competitors because it targeted iOS users with ads from app tracking data. The complaint was filed jointly by four French advertising trade groups -- IAB France, Mobile Marketing Association (MMA), SRI and UDECAM.

Firefox

Windows Defender Finally Squashes Firefox Bug That Ate CPUs For 5 Years (pcworld.com) 85

An anonymous reader shares a report: Firefox has a reputation of being something of a resource hog, even among modern browsers. But it might not be entirely earned, because it looks like a CPU bug affecting Firefox users on Windows was actually the fault of Windows Defender. The latest update to the ubiquitous security tool addresses the issue, and should result in measurably lower CPU usage for the Windows version of Firefox. According to Mozilla senior software engineer Yannis Juglaret, the culprit was MsMpEng.exe, which you might recognize from your Task Manager. It handles the Real-Time protection feature that monitors web activity for malicious threats.

The bug was causing Firefox to call on the service much more frequently than comparable browsers like Chrome or Edge, resulting in notable CPU spikes. Said CPU spikes could reduce performance in other applications or affect a laptop's battery life. The issue was first reported on Mozilla's bug tracker system way back in 2018 and quickly assigned to the MsMpEng service, but some more recent and diligent documentation on the part of Juglaret resulted in more swift action from Microsoft's developers.

IT

The Problem With Weather Apps (theatlantic.com) 57

An anonymous reader shares a report:Weather apps are not all the same. There are tens of thousands of them, from the simply designed Apple Weather to the expensive, complex, data-rich Windy.App. But all of these forecasts are working off of similar data, which are pulled from places such as the National Oceanic and Atmospheric Administration (NOAA) and the European Centre for Medium-Range Weather Forecasts. Traditional meteorologists interpret these models based on their training as well as their gut instinct and past regional weather patterns, and different weather apps and services tend to use their own secret sauce of algorithms to divine their predictions. On an average day, you're probably going to see a similar forecast from app to app and on television. But when it comes to how people feel about weather apps, these edge cases -- which usually take place during severe weather events -- are what stick in a person's mind. "Eighty percent of the year, a weather app is going to work fine," Matt Lanza, a forecaster who runs Houston's Space City Weather, told me. "But it's that 20 percent where people get burned that's a problem."

No people on the planet have a more tortured and conflicted relationship with weather apps than those who interpret forecasting models for a living. "My wife is married to a meteorologist, and she will straight up question me if her favorite weather app says something different than my forecast," Lanza told me. "That's how ingrained these services have become in most peoples' lives." The basic issue with weather apps, he argues, is that many of them remove a crucial component of a good, reliable forecast: a human interpreter who can relay caveats about models or offer a range of outcomes instead of a definitive forecast. [...] What people seem to be looking for in a weather app is something they can justify blindly trusting and letting into their lives -- after all, it's often the first thing you check when you roll over in bed in the morning. According to the 56,400 ratings of Carrot in Apple's App Store, its die-hard fans find the app entertaining and even endearing. "Love my psychotic, yet surprisingly accurate weather app," one five-star review reads. Although many people need reliable forecasting, true loyalty comes from a weather app that makes people feel good when they open it.

Android

South Korea Fines Google $32 Million for Blocking Games on Competing Platform (reuters.com) 13

South Korea's antitrust regulator has fined Alphabet's Google 42.1 billion won ($31.88 million) for blocking the release of mobile video games on a competitor's platform. From a report: The Korea Fair Trade Commission (KFTC) said on Tuesday that Google bolstered its market dominance, and hurt local app market One Store's revenue and value as a platform, by requiring video game makers to exclusively release their titles on Google Play in exchange for providing in-app exposure between June 2016 and April 2018.

Google said it will review the final decision by the KFTC to evaluate the next course of action. "Google makes substantial investments in the success of developers, and we respectfully disagree with the KFTC's conclusions", a spokesperson said. The KFTC said the move against the U.S. technology giant is part of efforts by the government to ensure fair markets.

AI

Commerce Department Looks To Craft AI Safety Rules (axios.com) 24

The federal government is taking what could be the first steps toward requiring safer, more transparent AI systems as a Commerce Department agency invited public comment to help shape specific policy recommendations. From a report: The move is far short of the comprehensive AI legislation critics have advocated. But with the frenzy over generative AI continuing to grow, the Biden administration is trying to get a head start on a government response to the fast-moving industry. The Commerce Department's National Telecommunications and Information Administration (NTIA) is asking the public to weigh in on what role the federal government can play to ensure AI algorithms are acting as claimed and not causing harm.

"We really believe in the promise of AI," Assistant Commerce Secretary Alan Davidson, who runs NTIA, tells Axios. "We do believe it needs to be implanted safely and we're concerned that's not happening right now." Davidson said that the government could take a range of actions to shape AI that don't require new legislation -- including mandating audits as part of its procurement standards or offering prizes or bounties to those who find bias within algorithms. "We need to start the hard work of actually putting in place processes that are going to make people feel like the (AI) tools are doing what they say they are going to do, that models are behaving," Davidson said.

AI

China Mandates Security Reviews for AI Services Like ChatGPT (bloomberg.com) 11

China plans to require a security review of generative AI services before they're allowed to operate, casting uncertainty over ChatGPT-like bots unveiled by the country's largest tech companies including Baidu. From a report: Providers of services must ensure content is accurate and respects intellectual property, and neither discriminates nor endangers security, the Cyberspace Administration of China said in draft guidelines published for public feedback. AI operators must also clearly label AI-generated content, the country's internet overseer said in a statement posted on its website.

The CAC's requirements add to Beijing's growing attempts to regulate the explosive growth of generative AI since OpenAI's ChatGPT fired up the industry in November. Companies from Alibaba Group to SenseTime and Baidu all aim to build the definitive next-generation AI platform for the world's largest internet market. That mirrors a growing wave of development abroad with Alphabet's Google and Microsoft among the many tech companies exploring generative AI, which can create original content from poetry to art just with simple user prompts. China's made no secret of its wish to elevate AI at a time the country is locked in a conflict with the US over technology from chips to EVs. But it remains uncertain how the government intends to both galvanize and police the emergent field.

Space

NASA Reveals What Made an Entire Starlink Satellite Fleet Go Down (inverse.com) 47

schwit1 shares a report from Inverse: On March 23, sky observers marveled at a gorgeous display of northern and southern lights. It was a reminder that when our Sun gets active, it can spark a phenomenon called "space weather." Aurorae are among the most benign effects of this phenomenon. At the other end of the space weather spectrum are solar storms that can knock out satellites. The folks at Starlink found that out the hard way in February 2022. On January 29 that year, the Sun belched out a class M 1.1 flare and related coronal mass ejection. Material from the Sun traveled out on the solar wind and arrived at Earth a few days later. On February 3, Starlink launched a group of 49 satellites to an altitude only 130 miles above Earth's surface. They didn't last long, and now solar physicists know why.

A group of researchers from NASA Goddard Space Flight Center and the Catholic University of America took a closer look at the specifics of that storm. Their analysis identified a mass of plasma that impacted our planet's magnetosphere. The actual event was a halo coronal mass ejection from an active region in the northeast quadrant of the Sun. The material traveled out at around 690 kilometers per second as a shock-driving magnetic cloud. Think of it as a long ropy mass of material writhing its way through space. As it traveled, it expanded and at solar-facing satellites -- including STEREO-A, which took a direct hit from it -- made observations. Eventually, the cloud smacked into Earth's magnetosphere creating a geomagnetic storm.

The atmosphere thickened enough that it affected the newly launched Starlink stations. They started to experience atmospheric drag, which caused them to deorbit and burn up on the way down. It was an expensive lesson in space weather and provided people on Earth with a great view of what happens when satellites fall back to Earth. It was also that could have been avoided if they'd delayed their launch to account for the ongoing threat.

Businesses

The Biggest EV Battery Recycling Plant In the US Is Open For Business (canarymedia.com) 62

Ascend Elements opened a recycling plant in Covington, Georgia in late March that it says is the largest electric-vehicle battery recycling facility in North America. "It can process 30,000 metric tons of input each year, breaking down old batteries and prepping the most valuable materials inside to be processed and turned into new batteries," reports Canary Media. "That capacity equates to breaking down the battery packs from 70,000 electric vehicles annually, said Ascend CEO Mike O'Kronley." From the report: Recycling can deliver new battery materials without the expense and environmental impact of new mining. It is extremely hard to develop new mines in the U.S., but the federal government is lavishing funds on new battery recycling plants. The revamped EV tax credits also call for increasing shares of domestically sourced batteries and battery materials. Those market and policy shifts made recycling sufficiently desirable that Ascend is paying other companies for their old batteries. At the moment, those deals are mostly with EV or battery makers that have high volumes to get rid of.

"Paying for these spent batteries keeps them from going into the landfill," O'Kronley told Canary Media. "It's better to get paid for it rather than throw them away." Ascend also accepts used consumer electronics from battery-collection programs, such as Call2Recycle. That's not to say there are enough old batteries coming in to fill the factory. Currently, 80 to 90 percent of what's going into Ascend's Covington facility is scrap materials from battery factories, including SK Battery America's plant in Commerce, Georgia.

That relationship influenced Ascend's choice of location: Covington sits in the emerging "Battery Belt," a swath of new battery factories and electric-vehicle plants opening up across the Midwest and the Carolinas, Georgia, Tennessee and Kentucky (look for all the blue icons in this White House map of new industrial investments). Fellow battery-recycling startup Redwood Materials also chose South Carolina for a forthcoming $3.5 billion recycling facility. "There will need to be a recycling plant within about an hour's drive of every single one of those [new battery gigafactories]," O'Kronley said. "You don't want to be [long-distance] shipping these very large, heavy EV batteries that are classified as Class 9 hazardous materials."
The report notes that the company's second commercial-scale facility in Hopkinsville, Kentucky will "introduce a brand-new technique for efficiently extracting cathode materials from black mass, which Ascend has dubbed 'hydro to cathode.'"
Android

How Much To Infect Android Phones Via Google Play Store? How About $20K (theregister.com) 13

If you want to sneak malware onto people's Android devices via the official Google Play store, it may cost you about $20,000 to do so, Kaspersky suggests. The Register reports: This comes after the Russian infosec outfit studied nine dark-web markets between 2019 and 2023, and found a slew of code and services for sale to infect and hijack the phones and tablets of Google Play users. Before cybercriminals can share their malicious apps from Google's official store, they'll need a Play developer account, and Kaspersky says those sell for between $60 and $200 each. Once someone's bought one of these accounts, they'll be encouraged use something called a loader.

Uploading straight-up spyware to the Play store for people to download and install may attract Google's attention, and cause the app and developer account to be thrown out. A loader will attempt to avoid that: it's software a criminal can hide in their otherwise innocent legit-looking app, installed from the official store, and at some convenient point, the loader will fetch and apply an update for the app that contains malicious code that does stuff like steal data or commit fraud. That update may ask for extra permissions to access the victim's files, and may need to be pulled from an unofficial store with the victim's blessing; it depends on the set up. The app may refuse to work as normal until the loader is allowed to do its thing, convincing marks into opening up their devices to crooks. These tools are more pricey, ranging from $2,000 to $20,000, depending on the complexity and capabilities required.

Would-be crims who don't want to pay thousands for a loader can pay substantially less -- between $50 and $100 -- for a binding service, which hides a malicious APK file in a legitimate application. However, these have lower successful install rates compared to loaders, so even in the criminal underground you get what you pay for. Some other illicit services offered for sale on these forums include virtual private servers ($300), which allow attackers to redirect traffic or control infected devices, and web injectors ($25 to $80) that look out for victims' visiting selected websites on their infected devices and replacing those pages with malicious ones that steal login info or similar. Criminals can pay for obfuscation of their malware, and they may even get a better price if they buy a package deal. "One of the sellers offers obfuscation of 50 files for $440, while the cost of processing only one file by the same provider is about $30," Team Kaspersky says. Additionally, to increase the number of downloads to a malicious app, thus making it more attractive to other mobile users, attackers can buy installs for 10 cents to $1 apiece.
Kaspersky's report can be found here.
Google

More Google Assistant Shutdowns: Third-Party Smart Displays Are Dead (arstechnica.com) 28

The Google Assistant continues to suffer at the hands of Google's product shutdowns. The latest products to die are third-party Google Assistant smart displays. From a report: "Google no longer provides software updates for these third-party Smart Displays: Lenovo Smart Display (7", 8" & 10"), JBL Link View and LG Xboom AI ThinQ WK9 Smart Display. This could impact the quality of video calls and meetings," said Google Duo said in a support page. We're pretty sure that announcement applies to every third-party Google Smart Display that has ever launched, so the product line is dead. Google's first-party smart displays, the Google Nest Hub and Nest Hub Max, aren't going anywhere and will now be the only options on the market.

Google Smart Displays put the Google Assistant on a screen and support all the same commands that a Google Assistant speaker like the Google Home or Nest Audio would; just shout "Hey Google," and it will attempt to recognize your command. The screen adds the ability to see a visual accompaniment to your search results, usually either some text, a photo slideshow, a timer, or media or smart home controls. The system is a touchscreen and has a really basic user interface that you can swipe around in without needing to talk to it.

Transportation

EPA Said To Propose Rules Meant To Drive Up Electric Car Sales Tenfold (nytimes.com) 179

The Biden administration is planning some of the most stringent auto pollution limits in the world, designed to ensure that all-electric cars make up as much as 67 percent of new passenger vehicles sold in the country by 2032, The New York Times reported, citing two people familiar with the matter. From the report: That would represent a quantum leap for the United States -- where just 5.8 percent of vehicles sold last year were all-electric -- and would exceed President Biden's earlier ambitions to have all-electric cars account for half of those sold in the country by 2030. It would be the federal government's most aggressive climate regulation and would propel the United States to the front of the global effort to slash the greenhouse gases generated by cars, a major driver of climate change. The European Union has already enacted vehicle emissions standards that are expected to phase out the sale of new gasoline-powered vehicles by 2035. Canada and Britain have proposed standards similar to the European model.

At the same time, the proposed regulation would pose a significant challenge for automakers. Nearly every major car company has already invested heavily in electric vehicles, but few have committed to the levels envisioned by the Biden administration. And many have faced supply chain problems that have held up production. Even manufacturers who are enthusiastic about electric models are unsure whether consumers will buy enough of them to make up the majority of new car sales within a decade. The action from the E.P.A. is likely to hearten climate activists, who are angry over the Biden administration's recent decision to approve an enormous oil drilling project on federal land in Alaska. Some inside the administration argue that speeding up a transition to renewable energy, with most Americans driving electric vehicles, would lessen demand for oil drilled in Alaska or elsewhere.

The Internet

If We Lose the Internet Archive, We're Screwed (sbstatesman.com) 112

An anonymous reader shares a report: If you've ever researched anything online, you've probably used the Internet Archive (IA). The IA, founded in 1996 by librarian and engineer Brewster Kahle, describes itself as "a non-profit library of millions of free books, movies, software, music, websites, and more." Their annals include 37 million books, many of which are old tomes that aren't commercially available. It has classic films, plenty of podcasts and -- via its Wayback Machine -- just about every deleted webpage ever. Four corporate publishers have a big problem with this, so they've sued the Internet Archive. In Hachette v. Internet Archive, the Hachette Publishing Group, Penguin Random House, HarperCollins and Wiley have alleged that the IA is committing copyright infringement. Now a federal judge has ruled in the publishers' favor. The IA is appealing the decision.

[...] Not only is this concern-trolling disingenuous, but the ruling itself, grounded in copyright, is a smack against fair use. It brings us one step closer to perpetual copyright -- the idea that individuals should own their work forever. The IA argued that their project was covered by fair use, as the Emergency Library provides texts for educational and scholarly purposes. Even writers objected to the court's ruling. More than 300 writers signed a petition against the lawsuit, including Neil Gaiman, Naomi Klein and -- get this -- Chuck Wendig. Writers lost nothing from the Emergency Library and gained everything from it. For my part, I've acquired research materials from the IA that I wouldn't have found anywhere else. The archive has scads of primary sources which otherwise might require researchers to fly across the country for access. The Internet Archive is good for literacy. It's good for the public. It's good for readers, writers and anyone who's invested in literary education. It does not harm authors, whose income is no more dented by it than any library programs. Even the Emergency Library's initial opponents have conceded this. The federal court's decision is a victory for corporations and a disaster for everyone else. If this decision isn't reversed, human beings will lose more knowledge than the Library of Alexandra ever contained. If IA's appeal fails, it will be a tragedy of historical proportions.

Operating Systems

OpenBSD 7.3 Released (openbsd.org) 135

metrix007 writes: OpenBSD, the OS that earned an exaggerated reputation for security simply by disabling services by default, has released version 7.3. Plenty of new improvements and bug fixes including to the editor, although still no real security features to help lock down a system, no virtual machine support for non-OpenBSD guests and no modern file system.
Apple

Global PC Shipments Dropped by a Third in Q1 (techcrunch.com) 40

After a nice spike during the first two years of the pandemic, global PC shipments continued to drop for a fourth consecutive quarter. Analyst firm IDC's latest figure has Q1 down 29% from the same time last year. Canalys paints an even more troubling picture for the industry, with a full 33% drop. From a report: A disappointing 2022 holiday set the stage for the beginning of the year, as vendor inventory has continued to pile up -- a trend that is expected to carry at least into Q3. The plunge has been so consistent that last quarter's figures dipped below those of Q1 2019, putting worldwide shipments below their pre-pandemic level.

[...] The culprits? For starters, a lot of people purchased news systems in 2020 and 2021 as their work settings adapted to a global pandemic. Laptops tend to have a life span of around three to five years. Desktops are even longer, at three to eight. People are likely to be content with their systems for a few years at least. As vendors go, both IDC and Canalys have Apple suffering the largest drop at 40.5 and 45.5%, respectively. That's a staggering figure, likely owing -- at least in part â" to the company coming back down to earth, as the M1 chip managed to buck larger category trends in 2021/2022. That chip marked Apple's biggest PC computing update since the company shifted to Intel decades prior. In spite of what ad copy might suggest, you don't get a generational shift every year.

Transportation

After Low-Speed Bus Crash, Cruise Recalled Software for Its Self-Driving Taxis in March (sfchronicle.com) 89

San Francisco autonomous vehicle company Cruise recalled and updated the software of its fleet of 300 cars, reports the San Francisco Chronicle, " after a Cruise taxi rear-ended a local bus "when the car's software got confused by the articulated vehicle, according to a federal safety report and the company."

The voluntary report notes that Cruise updated its software on March 25th. Since last month's low-speed crash, which resulted in no injuries, Cruise CEO Kyle Vogt said the company chose to conduct a voluntary recall, and the software update assured such a rare incident "would not recur...." As for the March bus collision, Vogt said the software fix was uploaded to Cruise's entire fleet of 300 cars within two days. He said the company's probe found the crash scenario "exceptionally rare" with no other similar collisions.

"Although we determined that the issue was rare, we felt the performance of this version of software in this situation was not good enough," Vogt wrote in a blog post. "We took the proactive step of notifying NHTSA that we would be filing a voluntary recall of previous versions of our software that were impacted by the issue." The CEO said such voluntary recalls will probably become "commonplace."

"We believe this is one of the great benefits of autonomous vehicles compared to human drivers; our entire fleet of AVs is able to rapidly improve, and we are able to carefully monitor that progress over time," he said.

The Cruise car was traveling about 10 miles per hour, and the collision caused only minor damage to its front fender, Vogt's blog post explained. San Francisco's buses have front and back coaches connected by articulated rubber, and when the Cruise taxi lost sight of the front half, it made the assumption that it was still moving (rather than recognizing that the back coach had stopped). Or, as Cruise told the National Highway Traffic Safety Administration, their vehicle ""inaccurately predicted the movement" of the bus. It was not the first San Francisco incident involving Cruise since June, when it became the first company in a major city to win the right to taxi passengers in driverless vehicles — in this case Chevrolet Bolts. The city's Municipal Transportation Agency and County Transportation Authority recorded at least 92 incidents from May to December 2022 in which autonomous ride-hailing vehicles caused problems on city streets, disrupting traffic, Muni transit and emergency responders, according to letters sent to the California Public Utilities Commission....

Just two days before the Cruise crash in March, the company had more problems with Muni during one of San Francisco's intense spring storms. A falling tree brought down a Muni line near Clay and Jones streets on March 21, and a witness reported on social media that two Cruise cars drove through caution tape into the downed wire. A company representative said neither car had passengers and teams were immediately dispatched to remove the vehicles.

On Jan. 22, a driverless Cruise car entered an active firefighting scene and nearly ran over hoses. Fire crews broke a car window to try to stop it.

The Military

Better Electronic Sensors Mean Militaries Need Better Camouflage (livemint.com) 72

Long-time Slashdot reader SpzToid shares a new report from the Economist: Thanks to innovations such as fractal colouration patterns, which mimic nature by repeating shapes at different scales, the distance from which naked eyes can quickly spot soldiers wearing the best camouflage has shrunk, by one reckoning, by a fifth over the past two decades. That is impressive. On today's battlefields, however, it is no longer enough to merely hide from human eyes.

People and kit are given away as well by signals beyond the visual spectrum, and devices that detect these wavelengths are getting better, lighter and cheaper. Thermal sensors are a case in point. Today, one that costs about $1,000 and weighs as little as five sachets of sugar can, in good weather, detect a warm vehicle as far off as 10km. As Hans Kariis, deputy head of signatures research at the Swedish Defence Research Agency, notes, that is well beyond the range at which a small drone would be spotted. Two decades ago, he adds, a less sensitive thermal sensor weighing a kilogram cost ten times as much.

And then there's automatic target-detection software, the article points out, like the Kestrel software deployed in more than 3,500 aircraft around the world, which "scans feeds of visual, infrared and radar data, and places red boxes around people and other potential targets, even as their positions in the frame move." And the threat has only increased with the arrival of satellite-based synthetic-aperture-radar (SAR) imagery.

But then the article lists examples of new camouflage that now tricks electronic sensors:
  • Military vehicles affix hexagon-shaped sheets that can be cooled with electricity to blend into the temperature of their surroundings.
  • Camouflage netting that absorbs (some) incoming radar beams with semi-conducting polymers while reducing heat signatures with insulation — and reflecting back the cooler temperature of the ground.
  • Netherlands-based TNO makes "battery-powered sniper suits" embedded with 500 LEDs that match the luminosity and color of the surroundings using real-time data from a helmet camera.

Earth

A Quandary as EV Makers Hunt for Metals: Unleash the Deep Sea Robots? (msn.com) 79

"As automakers scour the planet for the metals it will take to build tens of millions of electric cars, they are deliberately taking a detour around one of the only places on earth where so much of what they need is laying around and available to be plucked," reports the Washington Post: The deep seabed is teeming with potato-sized rocks packed with the nickel, cobalt, copper and manganese EV manufacturers covet. But efforts by mining companies to harvest the nodules with undersea robots are hitting rough waters. EV manufacturers who need the minerals for their batteries are distancing themselves from the practice as diplomats and scientists sound an alarm over the ecological damage that could be caused by rushing to scrape the sea floor.

The misgivings of the auto companies are hardly assuaged by the messy, contentious deliberations over it all at the headquarters of the United Nations-chartered International Seabed Authority here. The authority, tasked with protecting and guiding development in international waters, has been in turmoil since the small Pacific Island nation of Nauru invoked a clause tucked in the Law of the Sea that could allow mining within months, likely before the full environmental impact is known or regulations are put in place....

More than 700 marine scientists have signed a petition demanding a [mining] moratorium, which is also supported by 13 countries. French President Emmanuel Macron is calling for a permanent ban.... Some car manufacturers, including BMW, Renault, Rivian, Volvo and VW publicly support a moratorium on seabed mining. GM, Ford and Daimler are, for now, keeping deep seabed materials out of their supply chain plans amid corporate concerns about environmental impact.

The Post got an interesting perspective from Ethan Elkind, director of the climate program at UC Berkeley's Center for Law, Energy and the Environment. "Auto companies don't want EV batteries associated with more destruction than they already have been," he tells them. "If ecological damage of these sensitive undersea areas comes to light after mining begins, they don't want to be a part of it."
Communications

How Much Data Did the Chinese Spy Balloon Collect? (nbcnews.com) 50

Long-time Slashdot reader schwit1 shared this report from NBC News: The Chinese spy balloon that flew across the U.S. was able to gather intelligence from several sensitive American military sites, despite the Biden administration's efforts to block it from doing so, according to two current senior U.S. officials and one former senior administration official. China was able to control the balloon so it could make multiple passes over some of the sites (at times flying figure-eight formations) and transmit the information it collected back to Beijing in real time, the three officials said.

The intelligence China collected was mostly from electronic signals, which can be picked up from weapons systems or include communications from base personnel, rather than images, the officials said. The three officials said China could have gathered much more intelligence from sensitive sites if not for the administration's efforts to move around potential targets and obscure the balloon's ability to pick up their electronic signals by stopping them from broadcasting or emitting signals.

America's Department of Defense "directed NBC News to comments senior officials made in February that the balloon had 'limited additive value' for intelligence collection by the Chinese government 'over and above what [China] is likely able to collect through things like satellites in low earth orbit.'"
GNU is Not Unix

FSF Awards 'Respects Your Freedom' Certification to ThinkPenguin's Gigabit Mini VPN Router (fsf.org) 6

The Free Software Foundation certifies products that meet their standards in regard to users' freedom, control over the product, and privacy. And they put out a new "Respects Your Freedom" certification on Thursday for ThinkPenguin's free software gigabit mini VPN router, the TPE-R1400.

From the FSF's announcement: This is ThinkPenguin's first device to receive RYF certification in 2023, adding to their vast catalogue of certified devices from previous years. As with previous routers from ThinkPenguin, the Free Software Gigabit Mini VPN Router ships with an FSF-endorsed fully free embedded GNU/Linux distribution called libreCMC. It also comes with a custom flavor of the U-Boot boot loader, assembled by Robert Call, the maintainer of libreCMC and a former FSF intern.

The router enables users to run their network connection through a VPN service, helping to simplify the process of keeping their communications secure and private. While ThinkPenguin offers a VPN service, users are not required to purchase a subscription to their service in order to use the router, and the device comes with detailed instructions on how to use the router with a wide variety of VPN providers.

"We're pleased to see ThinkPenguin continue with their commitment to bringing out devices that put software freedom as their first priority under the RYF program. The release of this router shows that ThinkPenguin is committed to the privacy and freedom of their users," said the FSF's executive director, Zoë Kooyman....

"The latest version of ThinkPenguin's VPN router lets its users take advantage of gigabit per second Internet connections while protecting their rights and privacy," said FSF's copyright and licensing associate, Craig Topham.

United States

Classified US Documents Leaked on 4chan, Telegram, Discord, and Twitter (msn.com) 133

America's Department of Justice just launched an investigation into the leaking of classified documents from the U.S. Department of Defense, reports the Washington Post.

"On Wednesday, images showing some of the documents began circulating on the anonymous online message board 4chan and made their way to at least two mainstream social media platforms, Telegram and Twitter." Earlier Friday, The Washington Post obtained dozens of what appeared to be photographs showing classified documents, dating to late February and early March, that range from worldwide intelligence briefings to tactical-level battlefield updates and assessments of Ukraine's defense capabilities. They outline information about the Ukrainian and Russian militaries, and include highly sensitive U.S. analyses about China and other nations. The materials also reference highly classified sources and methods that the United States uses to collect such information, alarming U.S. national security officials who have seen them.... The material that appeared online includes photographs of documents labeled "Secret" or "Top Secret," and began appearing on Discord, a chat platform popular with gamers, according to a Post review.

In some cases, it appears that the slides were manipulated. For instance, one image features combat casualty data suggesting the number of Russian soldiers killed in the war is far below what the Pentagon publicly has assessed. Another version of the image showed higher Russian casualty figures. Besides the information on casualties that appeared to be manipulated to benefit the Russian government, U.S. officials who spoke to The Post said many of the leaked documents did not appear to be forged and looked consistent in format with CIA World Intelligence Review reports distributed at high levels within the White House, Pentagon and the State Department....

The documents appear to have been drawn from multiple reports and agencies, and concern matters other than Ukraine. Two pages, for example, are purportedly a "CIA Operations Center Intelligence Update," and includes information about events concerning Russia, Hungary and Iran.... Rachel E. VanLandingham, a former Air Force attorney and expert on military law, said that whoever is responsible for the leak "is in a world of hurt." Such breaches, she said, constitute "one of the most serious crimes that exist regarding U.S. national security...."

Skepticism abounded Friday among both Russian and Ukrainian officials aware of reports about the leaks, with each side accusing the other of being involved in a deliberate act of disinformation.

The Post notes one defense official told them "hundreds — if not thousands" of people had access to the documents, so their source "could be anyone."

But the photographs received by the Post were apparently taken from printed documents, and "classified documents may only be printed from computers in a secure facility, and each transaction is electronically logged, said Glenn Gerstell, a former general counsel with the National Security Agency who emphasized that he was speaking only about general procedures. "The fact that the documents were printed out should significantly narrow the universe of the initial inquiry."

Slashdot Top Deals